Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Forbidden: seccomp may not be set #30

Open
sweanan opened this issue Feb 9, 2023 · 0 comments
Open

Forbidden: seccomp may not be set #30

sweanan opened this issue Feb 9, 2023 · 0 comments

Comments

@sweanan
Copy link

sweanan commented Feb 9, 2023

Issue:

Currently the RKE2 version used in this terraform script is v1.21.5+rke2r2
With this version when we try to do a Flux Bootstrap on the RKE2 we see the below error

E0207 05:26:13.205491 1 replica_set.go:532] sync "flux-system/source-controller-66969f4994" failed with pods "source-controller-66969f4994-" is forbidden: PodSecurityPolicy: unable to admit pod: [pod.metadata.annotations[container.seccomp.security.alpha.kubernetes.io/manager]: Forbidden: seccomp may not be set] E0207 05:26:13.205536 1 replica_set.go:532] sync "flux-system/notification-controller-55cbd85d67" failed with pods "notification-controller-55cbd85d67-" is forbidden: PodSecurityPolicy: unable to admit pod: [pod.metadata.annotations[container.seccomp.security.alpha.kubernetes.io/manager]: Forbidden: seccomp may not be set] E0207 05:26:13.205536 1 replica_set.go:532] sync "flux-system/kustomize-controller-79b77b857f" failed with pods "kustomize-controller-79b77b857f-" is forbidden: PodSecurityPolicy: unable to admit pod: [pod.metadata.annotations[container.seccomp.security.alpha.kubernetes.io/manager]: Forbidden: seccomp may not be set p

According o this Bug fix : https://repo1.dso.mil/big-bang/bigbang/-/issues/1075 Fix for this was done as part of version v1.22 and above

Updating the RKE2 version in this terraform script fixes the above issue.

PR :#31

cc: @Nepomuceno , @robcamer

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant